Description

Manage cloud security compliance and risk assessment programs within a government framework.

Responsibilities

• Review legal contracts, SLAs, and DPAs to ensure alignment with information security and privacy requirements.
• Liaise with attorneys and business stakeholders to provide actionable risk insights and ensure contractual compliance.
• Design and implement cloud information security and privacy compliance programs based on regulatory laws and risk management frameworks.
• Lead cloud-based risk assessments, control gap analyses, and communication plans.
• Execute cross-functional interviews to verify that security and privacy controls are implemented and operating correctly.

Required Skills

• 5+ years of experience in cybersecurity compliance or risk management.
• Direct experience with NIST 800-53 and FedRAMP assessment frameworks.
• Ability to interpret complex legal language in vendor contracts and data processing agreements.
• Proven capability in designing and implementing cloud governance, risk, and compliance (GRC) programs.
• Experience leading risk assessments and control gap analysis procedures.
• Strong technical and program management skills to track and report on program deliverables.
• Ability to communicate assessment results and metrics to technical and non-technical stakeholders.

Preferred Skills

• Degree in any field.

Key Skills

Education

ANY GRADUATE